CVE-2011-3003 Mozilla Firefox before 7.0 and SeaMonkey before 2.4 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an unspecified WebGL test case that t...
HighCVSS 10.0
EPSS 4.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Mozilla Firefox before 7.0 and SeaMonkey before 2.4 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an unspecified WebGL test case that triggers a memory-allocation error and a resulting out-of-bounds write operation.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla Firefox | < 7.0 | 7.0 |
| mozilla seamonkey | < 2.4 | 2.4 |
References
- MDVSA-2011:141 third-party-advisory vendor-advisory
- www.mozilla.org vendor-advisory
- bugzilla.mozilla.org issue-tracking vendor-advisory
- oval:org.mitre.oval:def:14054 signature third-party-advisory vdb-entry